Red Hat Security AdvisoryRHSA-2017:0838
openjpeg security update
Released 2017-03-23 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) openjpeg-1.5.1-16.el7_3, openjpeg-libs-1.5.1-16.el7_3
- Red Hat Enterprise Linux Client Optional (v. 7) openjpeg-1.5.1-16.el7_3, openjpeg-devel-1.5.1-16.el7_3
- Red Hat Enterprise Linux ComputeNode (v. 7) openjpeg-1.5.1-16.el7_3, openjpeg-libs-1.5.1-16.el7_3
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) openjpeg-1.5.1-16.el7_3, openjpeg-devel-1.5.1-16.el7_3
- Red Hat Enterprise Linux Server (v. 7) openjpeg-1.5.1-16.el7_3, openjpeg-libs-1.5.1-16.el7_3, openjpeg-libs-1.5.1-16.el7_3.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) openjpeg-1.5.1-16.el7_3, openjpeg-devel-1.5.1-16.el7_3, openjpeg-devel-1.5.1-16.el7_3.ppc
- Red Hat Enterprise Linux Workstation (v. 7) openjpeg-1.5.1-16.el7_3, openjpeg-libs-1.5.1-16.el7_3
- Red Hat Enterprise Linux Workstation Optional (v. 7) openjpeg-1.5.1-16.el7_3, openjpeg-devel-1.5.1-16.el7_3
Fixes 6 records
Priority MEDIUM 44
Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.07114 · Published 2016-09-21 · Fixed CWE-190
Priority MEDIUM 42
Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01963 · Published 2016-09-11 · Fixed CWE-190
Priority MEDIUM 41
Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to ca…
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.01536 · Published 2016-09-11 · Fixed CWE-190
Priority MEDIUM 40
An out-of-bounds read vulnerability was found in OpenJPEG 2.1.2, in the j2k_to_image tool.
CVSS 3.0HIGH 8.1· Network · No auth · User interaction · EPSS 0.02467 · Published 2018-08-01 · Fixed CWE-125
Priority LOW 38
openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.01896 · Published 2016-12-22 · Fixed CWE-787
Priority LOW 36
Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow)…
CVSS 3.0HIGH 7.6· Network · No auth · User interaction · EPSS 0.01284 · Published 2016-08-07 · Fixed CWE-119
THREATIST.IORead the docs